This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/pytEa-hARvoLd3GQvwYYDRHNcGk.roa File: pytEa-hARvoLd3GQvwYYDRHNcGk.roa (raw, json) Hash identifier: CeTqphbY0xTbKA/3SAMN5LszwjCvt48mPFIksGd51N4= Subject key identifier: A7:2B:44:6B:E8:40:46:FA:0B:77:71:90:BF:06:18:0D:11:CD:70:69 Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Certificate serial: 019B122985415349253503B298B951791145 Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/pytEa-hARvoLd3GQvwYYDRHNcGk.roa Signing time: Fri 12 Dec 2025 10:44:29 +0000 ROA not before: Fri 12 Dec 2025 10:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39728 IP address blocks: 45.152.24.0/22 maxlen: 24 45.152.27.0/24 maxlen: 24 91.217.4.0/23 maxlen: 24 176.113.224.0/19 maxlen: 19 178.214.160.0/19 maxlen: 19 178.216.232.0/21 maxlen: 21 185.149.196.0/22 maxlen: 22 185.178.245.0/24 maxlen: 24 194.31.152.0/22 maxlen: 24 195.8.56.0/23 maxlen: 24 2a07:6900::/48 maxlen: 48 2a07:6900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:29:85:41:53:49:25:35:03:b2:98:b9:51:79:11:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Validity Not Before: Dec 12 10:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a72b446be84046fa0b777190bf06180d11cd7069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:74:94:e8:d2:c3:a5:8b:f5:dc:11:13:52: 6e:22:cb:85:c2:97:6f:38:e3:a1:dc:fc:07:be:7b: 97:b5:e7:38:5a:7f:f7:56:1c:71:90:16:24:d6:7e: ba:c4:b9:f2:c2:6f:ca:f3:60:34:16:d0:5e:6a:c1: df:e0:fd:3a:ad:9f:52:44:ec:7b:57:38:a6:5e:b7: 69:02:63:f0:54:e7:81:da:07:84:7c:8b:7a:f2:1a: 77:d4:8a:c6:10:3d:46:55:d0:d1:ba:ee:d2:1a:a4: dd:36:7f:21:e0:83:ca:74:22:99:e5:60:e3:7c:5c: fa:ef:91:66:18:49:e0:13:6b:f1:cd:cb:dd:c1:5b: 45:ef:06:f0:4b:93:45:29:6f:1a:06:90:85:bb:26: e0:d9:59:38:cb:39:2f:fb:cd:6b:a5:60:42:53:c0: 42:33:3a:50:ad:45:61:a4:46:f7:33:e1:52:69:40: 81:78:bb:87:4c:57:18:00:db:f4:ed:5e:e0:2c:7a: 69:9d:b5:c9:98:c5:2a:9f:2a:07:50:bd:85:6b:16: e6:55:a6:18:d1:8d:a1:b9:d6:00:e9:cf:6d:42:97: 93:4a:7c:37:31:3b:f0:b8:7e:97:e0:01:26:6c:d3: 23:10:d3:09:7b:1d:e5:a9:a6:24:5f:26:ec:47:7b: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:44:6B:E8:40:46:FA:0B:77:71:90:BF:06:18:0D:11:CD:70:69 X509v3 Authority Key Identifier: keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/pytEa-hARvoLd3GQvwYYDRHNcGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.24.0/22 91.217.4.0/23 176.113.224.0/19 178.214.160.0/19 178.216.232.0/21 185.149.196.0/22 185.178.245.0/24 194.31.152.0/22 195.8.56.0/23 IPv6: 2a07:6900::/47 Signature Algorithm: sha256WithRSAEncryption 43:72:5a:9c:03:0e:47:74:de:ae:88:de:f9:a7:16:20:13:a5: 3e:ee:d5:41:f3:02:44:35:c3:ce:5b:14:4b:23:3f:fa:7e:8e: 32:db:54:57:70:2d:3e:3a:7a:dd:a0:4d:33:76:b0:47:3b:07: 11:e4:b6:db:20:41:2b:5c:c5:6d:c0:a3:00:4b:9f:60:cb:e3: 36:e8:67:3a:dd:80:7a:aa:3e:7f:ee:79:82:70:f9:a5:4c:9a: 0f:e6:52:74:34:07:2f:b5:4d:9f:3f:64:6b:95:5e:5b:2f:bc: 9b:f8:a8:b4:58:62:44:7f:77:e9:56:5d:69:73:2d:ab:f9:f3: 46:6e:76:96:95:1a:e6:a0:d4:5c:ab:c2:41:4a:21:d3:77:65: 7b:c2:f5:4e:a3:5b:d2:3e:f8:aa:31:ca:53:e6:75:20:b0:df: 10:47:c8:c5:71:87:81:fe:6d:1a:cb:33:83:be:c2:b5:ff:8e: 3b:0e:59:95:cd:90:ef:08:40:40:dd:f7:e5:44:a2:2c:ef:7b: 3b:25:97:6d:9d:02:d6:69:44:a8:5f:37:8e:e4:01:e3:63:46: f4:ae:0d:78:52:2c:cb:f7:30:0c:2a:35:77:8c:06:d7:1b:3a: 65:19:f9:47:8d:55:16:54:21:b1:98:ff:01:c3:1a:58:7d:21: 2b:29:99:f9 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZsSKYVBU0klNQOymLlReRFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0 ODQxMGIwHhcNMjUxMjEyMTA0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJiNDQ2YmU4NDA0NmZhMGI3NzcxOTBiZjA2MTgwZDExY2Q3MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRt0lOjSw6WL9dwRE1JuIsuFwpdv OOOh3PwHvnuXtec4Wn/3VhxxkBYk1n66xLnywm/K82A0FtBeasHf4P06rZ9SROx7 VzimXrdpAmPwVOeB2geEfIt68hp31IrGED1GVdDRuu7SGqTdNn8h4IPKdCKZ5WDj fFz675FmGEngE2vxzcvdwVtF7wbwS5NFKW8aBpCFuybg2Vk4yzkv+81rpWBCU8BC MzpQrUVhpEb3M+FSaUCBeLuHTFcYANv07V7gLHppnbXJmMUqnyoHUL2FaxbmVaYY 0Y2hudYA6c9tQpeTSnw3MTvwuH6X4AEmbNMjENMJex3lqaYkXybsR3u4EwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKcrRGvoQEb6C3dxkL8GGA0RzXBpMB8GA1UdIwQY MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt OTMzYmZhNTkyYjFkLzEvcHl0RWEtaEFSdm9MZDNHUXZ3WVlEUkhOY0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQCLZgYAwQB W9kEAwQFsHHgAwQFstagAwQDstjoAwQCuZXEAwQAubL1AwQCwh+YAwQBwwg4MA8E AgACMAkDBwEqB2kAAAAwDQYJKoZIhvcNAQELBQADggEBAENyWpwDDkd03q6I3vmn FiATpT7u1UHzAkQ1w85bFEsjP/p+jjLbVFdwLT46et2gTTN2sEc7BxHkttsgQStc xW3AowBLn2DL4zboZzrdgHqqPn/ueYJw+aVMmg/mUnQ0By+1TZ8/ZGuVXlsvvJv4 qLRYYkR/d+lWXWlzLav580ZudpaVGuag1FyrwkFKIdN3ZXvC9U6jW9I++KoxylPm dSCw3xBHyMVxh4H+bRrLM4O+wrX/jjsOWZXNkO8IQEDd9+VEoizvezsll22dAtZp RKhfN47kAeNjRvSuDXhSLMv3MAwqNXeMBtcbOmUZ+UeNVRZUIbGY/wHDGlh9ISsp mfk= -----END CERTIFICATE-----Generated at Tue Dec 16 00:29:43 2025 by rpki-client